So the ideas are;
(1) Syntax highlight for the lua code, may be tricky but I'll look into it.
(2) Do not show toc until really needed, so I could use the folder name as base for toc title unless it is specifically edited on request, some show/hide button thingy on the toc step.

As for safety, the file is automatically created and as soon the zip is either canceled or downloaded, the file is removed from the system. There is nothing to steal, except maybe accessing http://addon.bool.no/cache for the latest interface version, it's automatically updated from Blizzards latest patch note page.